Imosphere Ltd

Formulate

Formulate is a suite of functionally-rich Resource Allocation System (RAS) algorithms used by Local Authorities and CCGs to support budgetary decision-making for individuals requiring care and support. For Local Authorities, there are Formulate models for adults with care needs and their carers, children with disabilities, and pupils with SEND.

Features

• Clear and concise form questions to drive the calculation
• Real-time Estimated Budget/Funding calculations for individuals
• Allocation Summary output to accompany Estimated Budget/Funding amount
• Quality Assurance output to help ensure accuracy of data
• Specialist support with configuration and implementation
• Cloud-based online software platform option for form completion
• Calculation web service option where forms completed in local system
• Remote updates to algorithm configuration as things change
• Inclusive benchmarking service for comparison to other Local Authorities

Benefits

• Digitally capture profiles of need for every individual requiring support
• Quickly calculate accurate estimated budgets to facilitate good support planning
• Have confidence in estimated budgets reflecting local costs and priorities
• Feel prepared for judicial reviews by using proven, tested tools
• Compare your organisation with others using benchmarking reports
• Be assured of accurate estimated budgets through comprehensive testing processes
• Off-the-shelf solution for Liquidlogic, Mosaic and CareDirector users
• Designed for strengths-focused, Plain English conversations
• Improve 'moving to adulthood' processes through common configuration decisions
• Digitise budget-setting workflow where systems are still paper-based

£17,000 an instance

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at oliver.brown@imosphere.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

173714562465774

Contact

Oliver Brown
0800 802 1884
oliver.brown@imosphere.co.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: The tools and algorithms are often built into a Local Authority's existing core IT system and so become an extension of that system - but are a standalone service where used on our optional cloud-based software platform.
• Cloud deployment model: Public cloud
• Service constraints: There is a brief monthly maintenance window for the algorithms web service timed to be outside of UK core office hours. The algorithms web service uses SOAP and support TLS 1.2 minimum for integrating with 3rd party IT systems.
• System requirements:
  • The algorithms web service uses SOAP technology for integration
  • The algorithms web service supports TLS 1.2 minimum for integration
  • Licences for the tools/algorithms per cohort are organisation-wide

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: We will acknowledge customer support queries within one working hour. We aim to respond to queries within one working day. More complex questions may take longer.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: During the implementation period, as part of the standard SLA we provide regular virtual calls to facilitate configuration decisions, IT systems implementation, and system testing before go-live, as well as 9-5 email and phone support provided by our consultancy team (including product and system experts). We supply training videos and e-learning quizzes to support a successful implementation - as well as providing training workshops for nominated 'superusers' as an optional extra.; ; After implementation, and for the lifetime of the contract, we provide a standard package of support which includes 9-5 email and phone support provided by our consultancy team, as well as a number of consultancy days to cover algorithm updates and remote 'health check' activities.; ; Additional time outside of the standard SLA can be purchased at an additional cost.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We recommend planning user familiarisation activities early on because supporting people to have the knowledge they require about a change increases the chances of internal adoption.; ; We offer a suite of training videos accompanied by e-learning quizzes and these are recommended alongside internal training about changes to processes. We also offer a 'superuser' training package where we facilitate remote workshop sessions to explain how to use the tools and algorithm outputs, their benefits, and the importance of accurate completion - enabling nominated superusers to provide support to end users.; ; Additionally, we provide extensive training materials and product documentation.; ; In respect of ‘go live’, as part of our package for 'superusers', we facilitate further remote workshops to help answer queries coming through from practitioners as they begin to put their first cases through the system – providing guidance and assurance at this key stage.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: For Local Authority customers calculating via the Formulate web service, with regards to the return and deletion of data should the contract be terminated - the data will be returned in CSV format. CSV data is one of the most widely accepted and portable data formats.; ; For Local Authority customers calculating via an internal script or similar solution within their local system(s), there would be no data from live usage of the algorithm(s) being held by Imosphere and therefore no data to return.
• End-of-contract process: Having agreed the end point of the contract, allowing time for export of the data required, we would disable all access to the relevant system(s) and securely destroy data held on our systems (including the web service databases) in line with our data sanitisation processes. Any user accounts and related information would also be destroyed. We retain financial information regarding our relationship for the period required by HMRC. The above is included in the price of the contract.; ; Additional data export services and migration consultancy are available at an additional cost.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: This does not apply where the tools/algorithms are accessed via the web service from a 3rd party IT system.; ; Where the Imosphere software system is used to access the tools/algorithms on a mobile device, assuming the device can access the service with respect to network and firewalls, the system is designed to allow core data and features to be accessed. This may differ in presentation and appearance compared to the desktop view to accommodate differences in screen sizes and available visual space.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Where a Local Authority wishes to use the tools/algorithms within their local core IT system, any such compatible system can be connected to our cloud-hosted algorithms web service via a SOAP interface.; ; Where a Local Authority wishes to use the tools/algorithms within the Imosphere software system, this is supplied with a built-in interface with the algorithms web service.
• Accessibility standards: None or don’t know
• Description of accessibility: N/a
• Accessibility testing: N/a
• API: No
• Customisation available: Yes
• Description of customisation: Firstly, there are various options for how to set-up the tools/algorithms for use by local practitioners - depending on existing local IT setup. These range from connectivity between an existing core system and the Imosphere web service to embedding of the relevant algorithm into the local system. We work with your IT staff to achieve the required setup.; ; Secondly, a key activity during implementation of Formulate is completion of the local ‘Configuration template’ - the key deliverable for the Local Authority. It sets out each step of the algorithm’s allocation process and explains the options available for configuring to reflect local circumstances and costs. This process and the expertise we offer in supporting it are essential in ensuring that the algorithm's use promotes financial sustainability – and provides a clear record of all decisions. Once the document has been completed (involving senior representatives from finance, commissioning and front-line practice), the decisions are applied by Imosphere to the algorithm.

Scaling

• Independence of resources: For customers calculating via the Formulate web service, the enterprise server dealing with calculation requests is heavily resourced. The logical tenanting structure of the algorithm setup ensures that concurrent requests from distinct organisations are processed independently. The majority of activity on the server involves reading from the database with very few write requests, keeping the likelihood of disruptive locks extremely low.; ; Managing user demand is not applicable for customers calculating via an internal script or similar solution within their local system(s).

Analytics

• Service usage metrics: Yes
• Metrics types: Regular and one-off extracts of data from the web service database can be sent to customers directly by an Imosphere representative which will show numbers of cases submitted through the system together with dates and times.; ; For customers calculating via an internal script or similar solution within their local system(s), data from live usage of the algorithm(s) is not held by Imosphere and therefore arrangements for providing service metrics need to be made locally.
• Reporting types: Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: For Local Authority customers calculating via the Formulate web service, Imosphere is able to provide data exports in CSV format. Customers often request regular extracts of data from the web service database to be sent to them directly by an Imosphere representative (for example, on a weekly basis).; ; For Local Authority customers calculating via an internal script or similar solution within their local system(s), data from live usage of the algorithm(s) is not held by Imosphere and therefore arrangements for extraction of data need to be made locally.
• Data export formats: CSV
• Data import formats: Other
• Other data import formats: N/a

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: For customers calculating via the Formulate web service, the service is intended to be available continuously except for periods of maintenance or upgrades. Any maintenance or scheduled tasks are triggered out of regular working hours, from 10pm. Support will be available during core working hours. ; ; In the event of service availability falling below our KPI minimum percentage standard of 99.99% during 24x7 hours, 4% of annual licence costs will be credited. Availability performance of the Live systems over the past year has been 99.99% over 24x7 hours.; ; For customers calculating via an internal script or similar solution within their local system(s), service availability is not applicable.
• Approach to resilience: Information is available on request.
• Outage reporting: Outage reports and notifications of planned work that may affect services are available via a public dashboard. Detailed information, including where individual customers may be affected, is provided via email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: For customers calculating via the Formulate web service, restricted access is not relevant as this is automated integration between a local system and the web service, rather than a front-end system.; ; For customers calculating via an internal script or similar solution within their local system(s), this is also not relevant.; ; For customers using our cloud-hosted software system, only users assigned Administrator permissions can access management interfaces.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: LRQA
• ISO/IEC 27001 accreditation date: 22/01/2013
• What the ISO/IEC 27001 doesn’t cover: All operations of the business are within scope.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our Information Security Management System is an integrated framework of policies and procedures developed in compliance with ISO 27001 and includes, amongst others: employee screening & training, record classification and retention, information risk and opportunity management, data protection impact analysis, change management, incident management, business continuity, relationships with suppliers and third parties, network & access control, cryptographic controls, pseudonymisation and de-identification, and physical security.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Documented and independently audited configuration and change management process.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Patches are deployed on a monthly scheduled basis following testing in a lab environment. Critical patches are deployed following our emergency change process. Multiple sources are used for information: independent security organisations (i.e. BugTraq, Full Disclosure), vendors, government (e.g. NCSC, NIST), published information from security organisations and professionals and security conferences.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We monitor activity at the firewall and internal detection systems based on log monitoring.
• Incident management type: Supplier-defined controls
• Incident management approach: Our incident management process is based on the ITIL approach and includes consideration of prioritisation, proportionate response, monitoring, escalation and retrospective review. All employees are trained on the incident reporting and management approach. Senior management monitor issues in aggregate and on specific escalated issues, including performance against internal and external SLA standards.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Wellbeing:

  Wellbeing

  The components that make up Imosphere's Formulate solution have all been co-produced by working with a wide range of representatives at different levels from the numerous Local Authorities we have worked with for over a decade.; ; As part of supporting new implementations of Formulate, Imosphere ensures further high levels of collaboration with a wide range of representatives at different levels. This ensures that the tools (which are used for both young people and adults across education and social care) are configured in a way that routinely produces indicative budgets/funding levels for local citizens with care and support needs that are both appropriate and sufficient - thus supporting stronger integrated communities.

Pricing

• Price: £17,000 an instance
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at oliver.brown@imosphere.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.